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(57)Abstract 

PROBLEM TO BE SOLVED: To restore a secret key 
by gathering a certain number of pieces of 
decentralized registration information for a prime 
factor factorization system open key cipher. 
SOLUTION: A key generator K100 sends an open key 
N and information providing that N is the product of 
two prime numbers to an administrator Ti (i=1...n) 
200, and T sends a prime number (p) and elements 
(g) and (h) whose order is N to K; and K generates 
random numbers (x) and r1, r2, and r3, calculates 
a=BCE (x, r1), b=BC (x, r2), and c=BCb (x2 mod N, 
r3) with a bit commitment function BC and sends 
them to Ti, and K prove that (a) and (b) made a bit 
commitment to the same (x) and (b) and (c) made a 
bit commitment to the same x2 mod N by exchanging 
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with T+i, sends (y) satisfying y2=(mod N) (y/N)=-1 to ; — 
Ti, disperses 8x) to s1...sn and sends si to I 
corresponding Ti f thereby sending pieces of 
information E1...Ek-1 providing that si is a correct value. 
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1, -, n) Ti t*3RKpfcfflS5C««N®7C«, 

hfcK'vil'J. KttSURxfcri , r2 . r3 
U t^v F3$7 M>KB8RBCT*a = BCg (x, 
n ) , b = BC a (x, r 2 ) , c = BCb(x 2 mod 
N, r 3 ) fcfcKLTTi ^'J. KttTi fc©*»J 
i:*JT'a i: b#lnl£x h^57 hbt«®. 
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Sifc&SHIU y 2 =x4(mod N) (y/N) — 1 
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i S*fJ6Ti /vjgUifesi tfiElAvfiiT'&oZlilfcil 
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100 



•8KK 

Tl.—.Tn 
200 



a.b.c 



(b.c)t!'HUx s m«JN«e7 h = 5v M/fcKW 



Si.— .So 

El.V.EK-l 



H 2 




1 

i (i = l, -, n) OflPSBH14:fCj:y, Xfg&gff 

istfgmmzmz iM^^irzwaMtfKm&sm 

tt£A#(Mi£^a(CJ:»j!BM!!ag (P, Q) t&mk 
N = PQ%fejcU NfefcMTi (i = l, -, n) 

crmmmmzm y 'gjsgg j«^i*ti»ftraT?3HR p 

m^mmity, a = F g (x) mcxl p &tfS£|tlC&& 

iz Lrwsmm t (DT£<Dm&miz «k y , w^cse^ 
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£t£^g'ix &Shamir®#3K*SIHiSSfflV^Tn«© 
«si,-, s n si £<g3i#Ti ©fJIIgg 

«wty«tu (p, q) ittTB-rsigw* 5 

i (i = l, -, n) ®««BlCj:yRSA4!WW« 
U «K^r*85««tiMBW3a3?asT?»oT. 30 

flt&^titt&OSiltic j: y r s A&wwfr^^sSfflft 

ggtdi^figgt (N, e) fc£f«U (N, e) S:«JI 

#Ti (i = i, -, n) owtsatcaiy, 

•tWfi^SXtt^^IsIT'ia^glC J: ySURX*£ 
fSc-r-o^^{CG = Xeniod NfcfftU *fc3Rttpjfce> 
t»C/*5*-**«:£jr»U X, p, s *m*tf£imz 

a&y, 

m&mskmt a = F g ( d ) mod P -^^mmrnzm^ t 

£%IZ. m£j$Mlta£X=F' c (d) mod N#**l 

£ * < fS#^£55cilgi: i ^iSgi:©'tWg^m(c j: yiE 

«^3®«ttd *Shamir©#5^t«ISKSS:S^Tnfli© 
fflsi,-, s n si £«3S#Ti ©fJfisg 
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r-Verlag, pp. 113-138(1993) ) R S A&ft £lzm%T'% 

y, -AZ'&nti^te^twmmz'&TiT'ZtiiKtii 

[0004] 

m&im&wAmm^izttLTW&mzjmbTzm 

£IZ& ySMMt&ttTC-t^^SrlJSl-tSifclC**. 

[0 0 0 5] 

3S7h^>!>Wie)llSt flffi$ L ^Pedersen<7)^£ 

[0 0 0 6] ff*^lT'tt, ySr^PjffLTSt, ^MK 
N&*(^^T5fcft®8HBflB84:LTx4 = y 2 
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N$rt^#Ti ®^ISg2 0 0 i (i = l, n) 
33T-VnbffS^O'fI^ (-1/N) = 1 

[0 0 0 9] 2. «^J^«1 OOCDMASOHBl 0 2 
* A N # 2 o ©JRROfln?* 5 i 4: fcfflia-*" fi «$B 

^Hk^mmSZ 0 0 ICi^j: 20 

flffilCOffififc&aclt. Micali©^'S ( "Fair Public-Key 
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[0 0 1 0] BCg (x, r) =g x hr mod p4. H 
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5. 

a = BC g (x, ri ) 
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-rti^g^fi^eS 10 0 izmz. 
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z = v + xR mod N, t = w + r 1 R mod N , t ' = 50 



w' + r 2 R mod N 
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6. OOttWBWC 
b = BCg (x 2 mod N, ri x+r2 iod N) 
c = BCb (x 2 mod N, r3 ) 
tmtx 2 mod N&bfs/ hnSy h Lfe=tj<7)T'&S3i: 

[0 0 14] 7. i£^il OOttPJ^M^Hl 0 7 
£/§vxTy 2 = x4 (mod N) fcitf^fcTiB-StOKItf 

(y/N) =-l%W£-tSy&tf»L«ffiBai2 0 0 
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[0 0 15] 8. gS*j3c4£gl 0 OtexSrShaimir 
^SBHiStC J: U SfattRgHi 10 85:1^1 nlOi s 
! , -, s n si 5:^fS#Ti ®<S3I£S2 

00itCi£<£>. ^ etc. a = BC g (x, ri)tf>filfc 
fUB LT. PedersenO^?£{C J: ySfc&ffiJISg 1 0 8 

s i #IE U < *ife«T»6 3 L *« 
«Ei.-, Efc-i k-ltttt^3E^M8£ 

[0 0 16] 9. MS£S2 0 0 i Bf!l&SaCSg2 0,5 
fc^tfifcicSf 2 0 6 &JS^T*4x6©iEiStt£lftlEU' 

10. s^-gi (p.'Q) srttTc-i-sjeai^a&sfcsictt 

s i $r^F*>^ U «fc y ShamirO^iStC <fc »J PJ^?iS 
JHSl 0 9&fflv^xCXeS:«5ci"*. GCD 
SUI«1 1 0£/gVNTGCD?|pf§§l 1 OSS^T. x 

z.n«fcu, p, Qco^fc^&o^ttfT'^-s). o 

*y. V^*m=x 2 (mod N) , -V =3 tTf E*0ffi*^ (m/ 
N) = 1 tfot, m 2 =y 2 =x4 (mod N) T'feU, 
3&»o (l/N) =-1, (y/N) =- l 
*^(^ (z-y) , o£'J (x 2 -y) ttN®3RH« 
T-f J »J 3 il tm^&tiZft b *IT v ^. <fcoTx 2 
- y i:NfcOS^:^®[5:*^tt«Nro 1 o®38BjR# 
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2:, H7tc < RaSfll2 0 0 i ©«||*0S£jj*-$". fi*T. ^ 




(4) 



i. m&m&i ooiiit£f£§§i o lfcBVN-r. rs 

AfTOOttmd £&ffitt (N, e) fc£fi)£U (N, 
e) $:^#Ti (i = l, n) C#g5I=gM2 0 0 

1 iCil^-Oo 

[0018] 2. is^g2 o o i wmjut#mw< 
7^-^4j^2o l&s^TiHR (p, q) *e>mc 

fi3Rjy<l©7C«, h£j£«>, -e*i&*£fi»Klf 10 01C 
fcfe q I P-1 (qttp-lffl*SB0 fc-^S. 
t'y hnS-y M^h^BCfcJSTFO.fc^K: 10 
£IW£. BC g (x, r) =gx hr mod p 
S e>JCft«ll2 0 0 i M3UR£jO»2 0 2 fcS^TX 
££f»U PJjk?SiJf§§2 0 3 £/SWTG = Xe mod N£ 
tttWS. 

[0 0 19] «B»2 0 0 ittXfee>tflC (p, q, 
g, h) fc*t&d»iC2lS. d^T% BC g (s, r) 
= gs hr mod p, BCg (s) =GS mod N fc-fS. 

3 . m&smw: ioo ttguK^^ 1 o 3 zm^x&m 

a=BC g (d, ri ) 20 

straws 

b = BCg (d) =X 

[0 0 2 0] 4. «t£j*Ml 0 0tta = BC g 
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[0 0 2 1] (b) lf^|g2 0 0 iiigUE5c^ict#2 0 
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(c) gi^s^Mi ooii. m&nw&i os^i^t 
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[0 0 2 2] (d) 0 0 i tt#T©*#fifcfi£ 

i-3fr£3*»fc«jfcs«*»2 0 4 &e>mcjt«»2 o 5 

BCg (z,t) = uaR mod p , BCg W =«' b R 40 
mod N 

£«MCi£8<#§2 0 5£jgvvrz#v, R, dcWMX 
•5, 
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